개인정보처리방침

Version: 31 August 2026

1. Controller

The controller responsible for processing personal data on this website is:

TronicalTune
Schützenwall 34
22844 Norderstedt
Germany

Legal representative and controller: Elnаrа Аnufriеvа

Telephone: +49 178 268 03 76
이메일: [email protected]

2. General principles and legal bases

We process personal data only where a legal basis permits it. Depending on the purpose, the legal basis is consent (Article 6(1)(a) GDPR), performance of a contract or pre-contractual steps (Article 6(1)(b)), compliance with a legal obligation (Article 6(1)(c)), or our legitimate interests or those of a third party (Article 6(1)(f)). Where consent is the basis, it may be withdrawn at any time with effect for the future.

We use technical and organisational safeguards appropriate to the risk. Internet transmission cannot, however, be guaranteed to be completely secure.

3. Hosting, content delivery and security

Our website is hosted on server infrastructure supplied by IONOS SE. For delivery and protection of the website we also use services of Cloudflare, Inc. and its European group company. These providers may process IP address, date and time, requested URL, referrer, browser and device information, response status and security signals. Server and security logs are processed to deliver the site, maintain stability, prevent abuse and investigate attacks (Article 6(1)(f) GDPR). Contractual processing arrangements are used where required.

Cloudflare may route data through infrastructure outside the EEA. Such transfers are based on an applicable adequacy decision, including an active EU-US Data Privacy Framework certification where available, or appropriate safeguards such as standard contractual clauses.

Operational logs are retained only as long as required for security and troubleshooting and are then deleted or anonymised, unless an incident requires longer retention.

4. Cookies and consent settings

Strictly necessary cookies and similar storage technologies are used to provide functions expressly requested by you, including the shopping cart, checkout, login, security and storage of your privacy choice. Their use is based on section 25(2) TDDDG and, for subsequent personal-data processing, Article 6(1)(b), (c) or (f) GDPR as applicable.

Analytics, advertising and other optional technologies are used only after consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You may refuse them without losing access to the shop. You can change or withdraw consent at any time through the persistent 쿠키 설정 control. Withdrawal does not affect processing carried out before withdrawal.

5. Shop, customer account and orders

When you use the cart, create an account or place an order, we process the data entered by you, order contents, prices, payment status, delivery information, account credentials, IP address and time records. Processing is necessary to prepare and perform the purchase contract (Article 6(1)(b) GDPR), to comply with tax, commercial, product-safety and accounting duties (Article 6(1)(c)) 및 to prevent fraud and enforce or defend claims (Article 6(1)(f)). The shop is operated with WordPress and WooCommerce, including extensions used for tax, invoicing, delivery and legally required checkout information.

Order and invoice data subject to German commercial or tax retention duties is generally retained for up to ten years. Other contract data is retained for the applicable limitation period and deleted when no longer required.

6. Payments

During checkout, payment information is transmitted to the payment provider selected by you. For PayPal and card-payment options made available through PayPal, the recipient is PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal processes data in part as an independent controller under its own privacy information. We receive transaction identifiers, status and the information needed to allocate and document payment, but not your complete payment credentials. The legal bases are Article 6(1)(b) and (c) GDPR; fraud prevention may also be based on Article 6(1)(f).

For bank transfer, participating banks process the payment under their own legal responsibilities.

7. Delivery and customs processing

We provide the recipient name, delivery address, contact details where required, parcel information and customs data to the carrier selected for the order, such as DHL or UPS 및 where applicable to customs authorities and logistics partners. This is necessary to perform the contract (Article 6(1)(b)) and comply with export, import and tax obligations (Article 6(1)(c)). Optional delivery notifications by email or telephone are based on consent or on performance of the requested delivery service, depending on the checkout choice.

8. Contact, support and withdrawal notices

When you contact us or submit the electronic withdrawal function, we process your contact information, message, contract reference and communication metadata to handle the request (Article 6(1)(b)), fulfil legal duties (Article 6(1)(c)) 및 document communications and protect legal claims (Article 6(1)(f)). Withdrawal notices are stored in a restricted administrative area and sent to the email address stated in the form. Support and legal communications are retained for the applicable limitation period unless a longer statutory duty applies.

9. Product reviews

If you submit a review, we process the display name, review text, rating, product/order relation where available, IP address and submission time to publish the review, prevent abuse and, where applicable, indicate how authenticity was checked. Publication is based on your request and consent (Article 6(1)(a)); abuse prevention and integrity of reviews are based on Article 6(1)(f). You may withdraw consent for future publication by contacting us. We may retain a restricted record where necessary to document moderation or defend claims.

10. Google Analytics and Google Ads

With your consent, we use Google Analytics 4 and Google Ads conversion or remarketing functions supplied by Google Ireland Limited. These services may process online identifiers, cookie identifiers, truncated or full IP address depending on configuration, device and browser data, interactions, approximate location and conversion information to measure use of the website and advertising performance and, where enabled, create advertising audiences.

The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. Google may allow access by group companies or providers in third countries. Transfers are protected by an applicable adequacy decision, including an active EU-US Data Privacy Framework certification where available, or standard contractual clauses. You may refuse or withdraw consent through 쿠키 설정.

11. YouTube and externally embedded media

Pages may contain YouTube videos or other external media. The external provider can receive your IP address, device information and the page visited and may set cookies when the content is loaded. Optional embeds are activated only after consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can withhold consent and use any direct link as an alternative where provided.

12. Bot protection

Forms may use Cloudflare Turnstile or comparable security checks to distinguish legitimate submissions from automated abuse. Security signals, IP address and device/browser information may be processed for this purpose. The legal basis is our legitimate interest in protecting forms, accounts and infrastructure (Article 6(1)(f) GDPR). We configure the service to avoid advertising use.

13. Recipients and international transfers

Within our business, access is limited to persons who need the data. External recipients may include hosting and IT providers, payment providers, carriers, professional advisers, tax and customs authorities 및 other public bodies where legally required. Providers acting on our instructions are bound by data-processing agreements where required.

Where data is transferred outside the EEA, we rely on an adequacy decision or appropriate safeguards, particularly standard contractual clauses 및 supplementary measures where necessary. Information about the relevant safeguards can be requested from us.

14. Your rights

제목 to the legal conditions, you have the right to access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) 및 to withdraw consent at any time (Article 7(3)).

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims. You may object to direct marketing at any time without stating reasons.

You also have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for our establishment is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

15. Required information and automated decisions

Information marked as required during checkout is necessary to conclude and perform the contract or meet a legal duty. Without it, we cannot process the order. We do not make decisions producing legal or similarly significant effects based solely on automated processing. Payment providers may conduct their own automated fraud or credit checks under their privacy information.